At a data design level, they could (and should, by default) at the very least keep all grossly personally identifying information out of the data collected. That's just simply responsible engineering in the modern era.

They could have implemented telemetry without requiring you to link your graphics card to your email or Facebook account, as GeForce Experience never required that in the past and still worked fine.

This isn't execs using innocuous data that the good engineers simply happened to have. This is new and specific personal data collection and association of information that they have no business collecting, except for the sole purpose of invading their users' privacy for side profits.